Effective 9 August 2026

Privacy

This notice explains what Schism handles, why it is used, and the controls available to you.

What stays on your device

Receipt images, receipt OCR text, voice audio and supported transaction SMS are processed on your device. SMS understanding is disabled unless you explicitly opt in and grant Android permission. Raw SMS, receipt images, OCR text, and voice audio are not sent to the Schism service. You review parsed details before choosing whether to create or share an expense.

What uses the Schism service

To provide accounts and shared groups, Schism processes your account name, email address, optional phone number, authentication and session data, group membership, expenses, splits, balances, invitations, item claims, and related activity. Other members of a shared group can see the group information needed to collaborate.

When the app downloads an optional OCR model, the request can include ordinary network metadata such as IP address, time, requested model version, and user agent. Receipt content is not part of that request.

Other services your device may contact

Schism asks our service which OCR model to use, and that request is then redirected to Hugging Face, where the published model files are hosted. Your device downloads the model from Hugging Face directly, so Hugging Face receives ordinary network metadata such as your IP address and the file requested. No receipt image, receipt text, or message content is involved.

Builds installed outside Google Play check the public GitHub Releases page for a newer version, which means GitHub receives ordinary network metadata for that request. Builds installed from Google Play do not make this request; Google Play handles their updates.

When you choose to settle up using a UPI app, Schism hands the payment amount and note to whichever UPI app you pick. Schism does not process the payment and never receives your payment-card or bank credentials.

Purchases, ads, and consent

For a Google Play subscription, Schism may receive and verify a Google Play Billing purchase token, product identifier, and subscription status to provide entitlement and prevent fraud. Schism does not receive your payment-card details.

The Play-distributed app includes Google Mobile Ads and the Google User Messaging Platform. Depending on your choices, region, and Google’s processing, these SDKs may collect or share IP-derived general location, app interactions, diagnostics, and device or account identifiers for advertising, analytics, consent management, security, and fraud prevention. Where required, the app asks for consent and provides Privacy choices in Settings.

Why, how long, and with whom

We use this data to operate accounts, sync shared expenses, calculate balances, verify purchases, prevent abuse, provide support, and meet legal obligations. Service data is encrypted in transit. It is handled by infrastructure and service providers needed for those purposes and is not sold. We do not sell your personal data.

Account and shared data is kept while your account is active. When you delete your account, that data is deleted or de-identified straight away, and backup copies containing it are purged within 30 days. Records we are required by law to keep are retained only for as long as that obligation lasts. Schism is operated from India and your data is processed there.

Your controls

You can leave SMS import off, revoke Android permissions, use manual or receipt entry instead, change applicable ad Privacy choices in the app, and delete your account. Contact dev.keshwani345@gmail.com with privacy questions.